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deactivation, and said arrangement further comprising a mobil IP 
detection device: 

c. said mobil IP detection device adapted to activate the first 
mobil IP client part on detection of a connection to the inner 
network (105) and a successfull mobil IP registration with the 
inner home agent (13 0) , and 

d. said mobil IP detection device adapted to activate the 
second mobil IP client part on detection of a connection to the 
outer network (107) and a successfull mobil IP registration with 
the outer home agent (13 0) . 

4 . (Amended) Arrangement according to claim 1, wherein said first 
mobil IP client part (116) is controllable for activation and 
deactivation, and that the arrangement further comprises a mobil 
IP detection device arranged to activate the first mobil IP 
client part on detection of connection to the outer network (107) 
by means of at least one of a detection device selected from a 
group comprising: 

e. a first monitoring device arranged to determine the source 
IP address of an incoming packet and to determine that the 
address is outside an address range configured for the inner 
network (105) , 

f . a second monitoring device arranged to analyze ICMP control 
messages and arranged to determine that an address associated 
with the ICMP control message is outside an address range 
configured for the inner network (105) , 

g. a third monitoring device arranged to detect an outer home 
agent (102) on transmission of a registration message with 
improper security association, and 

h. a fourth monitoring device arranged to compare results from 
said first and second monitoring devices with collected history 
regarding MAC and IP addresses to Mobil IP Foreign Agents, 
Default gateways, and WLAN access points that indicate that the 
mobil terminal is operating in the outer network, and 
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wherein at least one of said detection devices (a,b,c,d) is 
arranged to indicate that the mobil terminal (103) is connected 
to the outer network. 

5 . (Amended) Arrangement according to claim 1, wherein 

said first mobil IP client part (116) is controllable for 
deactivation, and 

said arrangement further comprising a mobil IP detection device 
arranged for deactivating the first mobil IP client part on 
detection of a connection to the outer network (107) by means of 
at least one of a detection device selected from: 

e. a first monitoring device arranged to determine the source 
IP address of an incoming packet and arranged for detecting that 
the address is inside an address range figured for the inner 
network (10 5) , 

f . a second monitoring device arranged to analyze ICMP controll 
messages and arranged to detect that an address associated with 
the ICMP controll message is inside an address range configured 
for the inner network (105) , 

g. a third monitoring device arranged to detect an inner home 
agent (130) on transmission of a registration message with 
incorrect security association, and 

h. a fourth monitoring device arranged to detect inconsistances 
in results from the first, the second and the third monitoring 
devices and collected history regarding MAC and IP addresses to 
Mobil IP Foreign Agents, Default Gateways, and WLAN access points 
that indicate that the mobil terminal is operating in the inner 
network (105) , and 

wherein at least one of said detection devices (a,b,c,d) is 
arranged to indicate that the mobil terminal (103) is connected 
to the inner network. 

6 . (Amended) Arrangement according to claim 1, wherein said 
arrangement further comprises, 
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a third security client part interposed between the first and 
second mobil IP client parts and configurable for via a security 
arrangement arranged between said inner and outer networks 
establishing a secure connection with the inner network. 

7. (Amended) A mobil IP terminal, wherein said mobil IP terminal 
comprises an arrangement according to claim 1 . 

8 . (Amended) A computer program product comprising a data carrier 
having thereon a computer program code loadable and executable in 
a mobil IP data communications terminal, wherein said computer 
program code when loaded and executed in the mobil IP data 
communications terminal effects the establishment of an 
arrangement as recited in claim 1 . 
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